TrustRadius Insights for Microsoft Intune are summaries of user sentiment data from TrustRadius reviews and, when necessary, third party data sources.
Pros
Simplified Device Rollout: Users have praised Microsoft Endpoint Manager for simplifying the rollout of devices, enabling inventory management and simultaneous patching and application deployment to multiple devices efficiently. They find this feature especially valuable in large-scale deployments where managing numerous devices is crucial.
Effective Patch Management: Reviewers appreciate the ability of Microsoft Endpoint Manager to speed up patch and software deployment across all endpoints, allowing for easy package creation and distribution throughout the environment. This streamlined process has helped users keep their systems updated promptly and consistently.
Streamlined Policy Management: Customers find the policy management, application deployment, and cloud management features of Microsoft Endpoint Manager beneficial for effective device management and security purposes. The centralized approach to managing policies has improved operational efficiency for many users.
We use Microsoft Intune to manage most of the laptops, and a portion of the mobile phones. Through Microsoft Intune we have control and a good overview of how compliant the devices are based on the policy that has been applied. The distribution of software also runs through Microsoft Intune, and receives regular updates.
Pros
Automated Device Provisioning
Compliance & Conditional Access Enforcement
Application Deployment & Management
Cons
Sometimes it takes a little longer for updates to be implemented properly.
Installation times vary. Sometimes it's very quick, and sometimes it takes longer.
Sometimes it is confusing which Microsoft licenses are required for certain functionalities
Likelihood to Recommend
Once the Microsoft Intune environment is set up properly, I definitely recommend Microsoft Intune. Especially from the administrator perspective, you have many options to properly manage and monitor all managed devices. You can easily assign different policy rules specifically for certain users or departments. You can also properly control the rollout of software to the right devices or departments. In addition, you have quite a bit of influence to tighten security to the wishes of an organization so that you meet certain standards.
VU
Verified User
Administrator in Information Technology (Information Technology & Services company, 201-500 employees)
We utilized Microsoft Intune to manage our laptops and desktops, as well as our employee's personal devices. For corporate devices we are controlling WIFI access, installing Office, managing secure folder access, tightening security controls, and managing encryption. Personal devices must be enrolled to use company resources such as Teams and email. The devices are checked for security standards and can be remotely wiped in the case of loss or theft.
Pros
Controlling Windows features and settings.
It's very easy to implement and manage the certificates for Apple products.
Robust configuration for managing a large number of devices.
Cons
Deploying applications to Windows devices.
Removing a policy from Microsoft Intune does not remove it from the endpoints.
The update ring feature requires increased licensing.
Likelihood to Recommend
Microsoft Intune is well suited for the larger end of the small business segment to the enterprise. The ability to configure and remotely deploy computer configurations, control mobile devices, and fine tune security controls of each device or device group is a major win for this product. Smaller and mid-sized businesses may balk at having to increase their license level to unlock the better updating features.
Microsoft Intune is use widely for our organisation to manage a range of devices. This enables all devices to remain up to date. Easy setup of devices and decommission when they are removed from our organisation. One thing that is handy with Microsoft Intune are policies and asset register. You can write script that can be run through Microsoft Intune.
Pros
Quick deployment
Central control
Integration with M365
Cons
Improve initial setup
Automatic back-end
Better integration with domain controller
Likelihood to Recommend
Microsoft Intune has great integration with Microsoft Office 365. It is a cloud based system which do not required having and maintaining on prem infrastructure. This enhances safety and security. While there are room for improvement, it is definitely a great product that integrate well with other platform. Microsoft Intune has many capabilities
VU
Verified User
Employee in Information Technology (Education Management company, 51-200 employees)
We use Microsoft Intune to manage our Windows, Android, iOS, and macOS devices. It provides a single admin console for all device types, ensuring they stay compliant with our configurations and app requirements. Additionally, Microsoft Intune gives us a streamlined way to deploy apps and configure device settings. We've also intgrated Windows Autopilot, Apple Business Manger, and Android enterprise to make onboarding new devices easy.
Pros
Deploy device settings and policies
Deploy apps and app settings
Checks device compliance
Streamlines onboarding of devices
Deploy device update policies
Cons
It should integrate with BeyondTrust and other remote access tools, not just TeamViewer.
App deployments should have a pre-install script option, not just requirement script options.
Sync now doesn't always update everything, should be an easy way to push and app, script, or settings instantly so you don't have to wait 24 hours
Likelihood to Recommend
It's the best tool to have for managing many devices with multiple os types, especially if you're already using MS Office products. I recommend bypassing hybrid join and opting for Entra ID joined instead. Once devices are enrolled, you'll be able to manage them remotely, ensuring seamless off-site management.
VU
Verified User
General Manager in Information Technology (Industrial Automation company, 51-200 employees)
We use [Microsoft] Endpoint Manager [(Microsoft Intune + SCCM)] for all of our workstations that are either hybrid Azure AD joined or simply Azure joined devices. We also use it to manage iDevices. We have used SCCM for several years now, and when Intune announced the co-management capability, we made the transition very quickly. There are certain elements that Intune does not handle, such as bare metal imaging, but otherwise we have moved all workloads to Intune while maintaining our SCCM on prem. This covers device compliance, WSUS, application deployment, configuration profiles, etc.
Pros
SCCM imaging can't be beat
Intune application deployment and WSUS ensures that devices are getting updates and applications, especially in WFH scenarios
The upgraded interface is much easier to work with than older SCCM iterations (2007 and below)
Cons
The ADMX templates are still lacking in some areas
Like SCCM, Endpoint Manager requires patience
It would be nice if there was better integration for remote connectivity
Likelihood to Recommend
For any enterprise environment, it will be hard to go wrong with [Microsoft Endpoint Manager (Microsoft Intune + SCCM)]. Is it the perfect solution? No...but when considering integration across the M365/Azure front, it has significant advantage. It is probably overkill for smaller organizations, or for small businesses with limited technology staff. That said, it is not the most complicated product offered by Microsoft :)
We are in the process of transitioning from Group Policy over to Microsoft Endpoint Manager. We are using it for controlling our policies and setting up our standard operating environment. as well as application deployment. It allows us to standardize what we are doing and automate IT functions, freeing up valuable resources to be better spent elsewhere.
Pros
Policy Management
Application Deployment
Cloud Management
Cons
Pricing
Steep Learning Curve
Likelihood to Recommend
I would implement Microsoft Endpoint Manager without a doubt in a new startup. Between this and Azure Active Directory, there is limited need for on-prem Group Policy & Active Directory. This would allow full cloud management of the enterprise and less need for on-prem services.
It can be tricky to migrate from on-prem to Microsoft Endpoint Manager within a larger organisation as each individual policy item would need to be implemented one by one and tested thoroughly - but well worth the effort to do this.
We use MS Intune and SCCM with our Azure cloud solution for all of our offices. It is great tools to control and monitoring our security, servers and applications. Manage mobile devices is highly important now days, so now we can manage our phones and tablets in modern way with modern approach.
Pros
We can add and assign mobile apps to user groups and devices
Manage access on personal devices by restricting actions users can do or not
Wipe or removing organization data from apps
Cons
Reporting should be improved
Better integration with AV software
AI integration with alert notification about unusual user behavior
Likelihood to Recommend
It is good for mid or ent business. Good interfaces and integration with other MS applications and services. Nowadays lots of companies use BYOD devices and try to manage them with Systems Center Configuration Manager, which bring some security issues and unconvinced. MS Intune may improve this situation and bring lots of benefits. For small business it is less appropriate because require licenses and IT professionals to manage.
We use SCCM for application and Windows desktop, laptop, and server patching. We accompany it with the PatchMyPC addons, so we can update the majority of applications we use for end-users.
We also use it to deploy security software.
Pros
Windows and Office patching: SCCM does this really well. It is efficient, reliable, and easy to schedule. It's quite simple to keep machines updated once they've been registered.
Application Deployment: SCCM very effectively deploys application and application updates. We use it very effectively to reinstall our security software if it gets uninstalled or needs to be updated.
Cons
Reporting: The SQL Reporting Services oriented user-interface is really not particularly user-friendly.
Inventory: The inventory function is overly basic and difficult to search. If this were improved to be a legitimate asset management tool, it would tremendously increase the value of SCCM to organizations.
Likelihood to Recommend
SCCM is awesome for patching and great for application deployment as well. If you use powerful add-ons like PatchMyPC and use Microsoft Azure integration to extend its reach to remote machines, it is truly indispensable.
It may be less so if you don't have the money for those additions. If you already have an effective patching solution that also handles third-party and remote patching, SCCM may not be worth the effort.
We use it for mobile device management, mobile application management, Mac OS management, and Windows 10 management. I have also converted GPO to Intune Policies for Windows 10 devices. The Bitlocker key is also being managed by Intune. I set up the company portal for self-services application installs.
Pros
Software deployment.
Device wipe.
Cons
Reporting.
User notification for patching/rebooting.
Likelihood to Recommend
It is well suited if you are an Office 365 shop. The ecosystem and security cannot be matched. Securing data and DLP is built-in or works together. It is a really cost-effective solution for MDM, MAM, and endpoint management.
VU
Verified User
Director in Information Technology (Biotechnology company, 51-200 employees)
It is used by two departments, enterprise services (e.g Infrastructure Administration, Email, Sharepoint, etc) and Help Desk.
Pros
Patching lots of computers (in my case 400+) without leaving your seat!! Less administrative overheads.
Deploying new machines with a standard image that is the same across the organisation and no one has a different set of image and therefore consistancy within the organsation.
Provide a comprehensive inventory of the organisation's computer assets.
Provide security auditors with patching compliance reports within the organisation.
Cons
Driver portals for different PC/Laptop manufactures.
There is no dashboard for the executive summary of the organisation's patch levels.
Being able to see the downloaded patches (labeled with KB numbers) according to their names on the SCCM server.
Likelihood to Recommend
Well suited where you have a vulnerability and just push the needed patch without going around each and every computer and addresses issues where the patch was released out of band. This saves valuable time and definitely frees administrators to do other tasks. You can push applications to users without them requiring administrators privileges and therefore still not having to be present!
It's less appropriate when it comes to third-party software patching e.g Winrar, 7Zip, Google Chrome, Firefox and these are not covered by SCCM. I would love for them to be able to extend their patch management to other vendors.